Awesome-Azure-Pentest

o365creeper

Enumerate valid email addresses

CloudBrute

Tool to find a cloud infrastructure of a company on top Cloud providers

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud

Azucar

Security auditing tool for Azure environments

CrowdStrike Reporting Tool for Azure (CRT)

Query Azure AD/O365 tenants for hard to find permissions and configuration settings

ScoutSuite

Multi-cloud security auditing tool. Security posture assessment of different cloud environments

BlobHunter

A tool for scanning Azure blob storage accounts for publicly opened blobs

Open Azure blobs and AWS bucket search

Office 365 User Enumeration

Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover v1 or office.com login page

CloudFox

Automating situational awareness for cloud penetration tests

Monkey365

Conduct Microsoft 365, Azure subscriptions and Azure Active Directory security configuration reviews

Azure-AccessPermissions

PowerShell script to enumerate access permissions in an Azure AD environment

Prowler

Perform AWS and Azure security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness

o365recon

Information gathering with valid credentials to Azure

Retrieve list of roles and associated role members

ROADtools

Framework to interact with Azure AD

PowerZure

PowerShell framework to assess Azure security

Azurite

Enumeration and reconnaissance activities in the Microsoft Azure Cloud

Sparrow.ps1

Helps to detect possible compromised accounts and applications in the Azure/M365 environment

Hawk

Powershell based tool for gathering information related to O365 intrusions and potential breaches

Microsoft Azure AD Assessment

Tooling for assessing an Azure AD tenant state and configuration

Cloud Katana

Unlocking Serverless Computing to Assess Security Controls

SCuBA M365 Security Baseline Assessment Tool

Automation to assess the state of your M365 tenant against CISA's baselines

Stormspotter

Azure Red Team tool for graphing Azure and Azure Active Directory objects

AzureADLateralMovement

Lateral Movement graph for Azure Active Directory

SkyArk

Discover, assess and secure the most privileged entities in Azure and AWS

omigood (OM I GOOD?)

Scanner to detect VMs vulnerable to one of the "OMIGOD" vulnerabilities

MicroBurst

A collection of scripts for assessing Microsoft Azure security

Decrypt Azure AD MSOL service account

Microsoft-Teams-GIFShell

Microsoft Teams can be leveraged by an attacker, to execute a reverse shell between an attacker and victim piped through malicious GIFs sent in Teams messages

MSOLSpray

A password spraying tool for Microsoft Online accounts (Azure/O365)

MSOLSpray.py

A Python version of the MSOLSpray password spraying tool for Microsoft Online accounts (Azure/O365)

o365spray

Username enumeration and password spraying tool aimed at Microsoft O365

MFASweep

A tool for checking if MFA is enabled on multiple Microsoft Services Resources

adconnectdump

Dump Azure AD Connect credentials for Azure AD and Active Directory

azure-security-lab

Securing Azure Infrastructure - Hands on Lab Guide

AzureSecurityLabs

Hands-on Security Labs focused on Azure IaaS Security

Aria Cloud Penetration Testing Tools Container

A Docker container for remote penetration testing

PurpleCloud

Multi-use Hybrid + Identity Cyber Range implementing a small Active Directory Domain in Azure alongside Azure AD and Azure Domain Services

BlueCloud

Cyber Range system with a Windows VM for security testing with Azure and AWS Terraform support

The link in the description contains a password-protected OVA file that can be used until 2nd March 2024